Thread Links | Date Links | ||||
---|---|---|---|---|---|
Thread Prev | Thread Next | Thread Index | Date Prev | Date Next | Date Index |
Clint Chaplin writes... > And yet, the real problem is that the MAC address is not > fixed, and can easily be spoofed. Yes, and that will be detected when the decryption fails (assuming per-session keys). The issue is not to rely on source MAC address as proof of identity, but as a convenient assertion of identity to be used as a screen for unauthorized packets and a label to look up a security association (e.g. encryption and MIC keys).